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(54) Method for tracking configuration changes in networks of computer systems through 
historical monitoring of configuration status of devices on the network 



(57) A tracking system that uses a revision control 
system (216) and configuration status gathering to his- 
torically track and store configuration changes in com- 
puters (108) and interconnect devices (106) to aid in 
managing and troubleshooting networks of computer 
systems. Configuration data is gathered from devices 
on the network on a periodic basts. The data collected 
each collection cycle is stored in a data storehouse 
(218) on a computer within the network, called the re- 
mote support node (102). The data storehouse (218) is 
comprised of a revision control system (216) and a data 
base (214). The data is accessed by computers on the 
network having web browsers. The user selects a first 
and second collection time, and any changes in config- 
uration of any monitored devices (106, 108) in the net- 
work occurring between these two collection times is 
displayed in the browser window. Configuration chang- 
es from different collection cycles may be viewed. 
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Description 

FIELD OF THE INVENTION 

[0001] This invention relates to computer systems 
and more particularly to managing and troubleshooting 
computer systems and other connected devices within 
networks. Even more particularly, the invention relates 
to managing and troubleshooting computer systems 
within networks by tracking configuration changes 
through historical monitoring of configuration status of 
devices on the network. 

BACKGROUND OF THE INVENTION 

[0002] Managing and troubleshooting computer sys- 
tem networks is a critical and essential task in most busi- 
nesses, governmental entities, and educational institu- 
tions today. Several products have been developed to 
help assist the system administrator perform manage- 
ment and troubleshooting functions on computers and 
interconnect devices, such as routers, bridges, hubs, 
switches, etc., on the network. Some products are de- 
signed to help manage system configurations on a real 
time basis. Such products can tell the systom adminis- 
trator what the configurations of particular computers or 
devices are at the present moment. Some products may 
also enable the system administrator to make immedi- 
ate changes to particular computers or devices or re- 
store them to a previous state. 
[0003] Other products can tell the system administra- 
tor what the current configuration of a computer or in- 
terconnect device is, but cannot tell the system admin- 
istrator what the configuration was at a particular point 
in time in the past. Still other products may be able to 
tell the system administrator what the configuration was 
a week ago as compared to its current status, but cannot 
tell what the configuration was two weeks ago as com- 
pared to the configuration status of one week ago. Also, 
most products do not show the system administrator 
what has changed during the two time periods in ques- 
tion, but merely show the entire status of the computer 
or interconnect device at each time period. The system 
administrator must compare the two configurations to 
identify what has changed. 

[0004] It is thus apparent that there is a need in the 
art for an improved method or apparatus which can pro- 
vide system administrators management and trouble- 
shooting functions that are not real time based. There 
is a need in the art for a method to identify what has 
changed within system configurations for computers or 
interconnect devices between two points in time in a 
quick and efficient manner and mako those changos 
readily available to the system administrator for trouble- 
shooting and managing purposes. The present inven- 
tion meets these and other needs in the art. 



SUMMARY OF THE INVENTION 

[0005] It is an aspect of the present invention to track 
configuration changes in computer system devices on 

5 a network. 

[0006] It is another aspect of the invention to use a 
revision control system to historically track configuration 
changes in computers and interconnect devices on a 
computer system network. 

10 [0007] Yet another aspect of the invention is to save 
the configuration status of computers and interconnect 
devices at particular points in time within a revision con- 
trol system. 

[0008] Still another aspect of the invention is to iden- 

'5 tify what has changed in the configuration of computers 
and interconnect devices to aid in troubleshooting and 
managing a computer system network. 
[0009] A further aspect of the invention is to display 
the configuration status of computers and interconnect 

20 devices at particular points in time in the past. 

[0010] A still further aspect of the invention is to 
change the time frames for displaying configuration sta- 
tus of computers and interconnect devices. 
[0011] Another aspect of the invention is to organize 

25 the configuration data collected into a logical hierarchy. 
[0012] A still further aspect of the invention is to dis- 
play configuration status data collected on computers 
and interconnect devices on a web browser. 
[0013] The above and other aspects of the invention 

30 are accomplished in a tracking system that uses a revi- 
sion control system and configuration information gath- 
ering to track and store configuration changes on a his- 
torical basis for computers and interconnect devices to 
aid in managing and troubleshooting networks of com- 

35 puter systems. The configuration data of monitored 
computers and interconnect devices on a network is 
gathered on a periodic basis and stored in a data store- 
house within a separate computer, referred to as a re- 
mote support node, which is connected to the network. 

40 The data storehouse is made up of a data base and the 
revision control system. The configuration information 
may be displayed on a graphics display of the remote 
support node directly, but more typically is accessed 
through another computer, having a web browser, that 

45 accesses the remote support node over the network. 
[001 4] For monitored computers, the method collects, 
among other things, configuration information about the 
operating system, file system, printing and spooling, 
boot and shutdown, hardware, software, and network 

so configurations. For monitored interconnect devices the 
method collects, among other things, configuration in- 
formation about interfaces, IP addresses, routes, static 
routes, TCP ports, UDP ports, SNMP variables : human 
and machine readable configuration files, and installed 

ss cards. 

[0015] Collector software residing on the remote sup- 
port node gathers configuration data from monitored cli- 
ent computers and interconnect devices on the network. 
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Each configuration hem collected from computers and 
network interconnect devices is specified by a data col- 
lection template built into the tracking syslem. Different 
templates are available for various computer types and 
interconnect devices, and each template determines 
what configuration items can be collected from each 
particular type of device. 

[0016] All client computers being monitored require 
special resident software, referred to as client collector 
software, to help facilitate the secure collection of con- 
figuration information. For monitored interconnect de- 
vices, no additional software is required, other than the 
standard SNMP (Simple Network Management Proto- 
col), Telnet (remote login virtual terminal protocol), and 
TFTP (Trivial File Transfer Protocol) facilities already 
available within the interconnect devices. The collector 
examines the interconnect device type and the request- 
ed configuration item to be collected to determine which 
of these communications methods, or which combina- 
tion of them, is most appropriate. However, monitored 
interconnect devices must grant access to the collection 
process Granting this access usually involves making 
a configuration change to the monitored interconnect 
device to enable collection. 

[0017] The collector software collects configuration 
items at preset collection cycles, normally once a day, 
by pre-defining an initial collection time and a frequency, 
usually daily. Each time a collection occurs, the data 
base is updated to start the next collection at the last 
collection time plus the frequency. 
[0018] At each collection cycle, a snapshot is con- 
structed for each configuration item for each monitored 
computer or interconnect device, and, if a change has 
occurred, the changes are stored in the data store- 
house. The configuration item may be a text file or the 
output of a command which displays configuration infor- 
mation in ASCII format. A snapshot is a unit of configu- 
ration data as it appears when collected from a moni- 
tored device. The actual data collected is stored in the 
revision control system, while the data base contains in- 
formation about what has changed and the logical hier- 
archy of the systems being monitored. 
[0019] When accessing the stored information 
through a web browser, the graphics display is split into 
two frames. The information's logical hierarchy is dis- 
played in a tree format in one of the frames. The chang- 
es found between snapshots taken on different collec- 
tion cycles are displayed in the other frame. Different 
configuration data may be displayed by changing the 
collection cycles selected for comparison. Configuration 
items which have changed between the two collection 
cycles selected are indicated by a marker placed on the 
icon of the item in the tree. If tho changod configuration 
item is in a group in the tree that has not been opened, 
the marker is propagated up the tree and displayed on 
the group icon. This notifies the user that at some level 
below this group icon, a change has occurred in a con- 
figuration item. By opening up as many groups and/or 



subgroups in the tree as are necessary, the user can 
eventually display the individual item or items that have 
changed that have the marker. 

5 BRIEF DESCRIPTION OF THE DRAWINGS 

[0020] The above and other aspects, features, and 
advantages of the invention will be better understood by 
reading the following more particular description of the 
io invention, presented in conjunction with the following 
drawings, wherein: 

FIG. 1 shows a block diagram of a networked sys- 
tem of computers and interconnect devices incor- 
'5 porating the tracking system of the present inven- 
tion; 

FIG. 2 shows a block diagram of a remote support 
node of the tracking system of the present inven- 
tion; 

20 FIG. 3 shows a block diagram of the hierarchy for 
storing data of the tracking system of the present 
invention; 

FIG. 4 shows a representation of a screen capture 
of a web browser accessing the stored data of the 
25 tracking system of tho present invention; 

FIG. 5 shows a flow diagram of displaying stored 
configuration information located in a remote sup- 
port node on a browser computer having a web 
browser; 

30 FIG. 6 shows a flow diagram of a remote support 
node collecting configuration data from computers 
and interconnect devices; 
FIGS. 7 and 7A show a flow diagram of configura- 
tion data collection from an interconnect device; 

35 and 

FIGS. 8 and 8A show a flow diagram of configura- 
tion data collection from a monitored computer. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

40 

[0021] The following description is of the best pres- 
ently contemplated mode of carrying out the present in- 
vention. This description is not to be taken in a limiting 
sense but is made merely for the purpose of describing 
45 the general principles of the invention. The scope of the 
invention should be determined by referencing the ap- 
pended claims. 

[0022] FIG. 1 shows a block diagram ol a networked 
system of computers and interconnect devices incorpo- 

so rating the tracking system of the present invention. Re- 
ferring now to FIG. 1 , computer system network 1 00 has 
a remote support node 102 connected to the other com- 
ponents of computer system network 100 through net- 
work connections 104. Computer system network 100 

55 also has interconnect devices 106, which may be rout- 
ers, bridges, hubs, switches, etc.. also connected 
through network connections 104 to remote support 
node 102. Computer system network 100 may have 
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more or less than the number of interconnect devices 
106 shown in FIG. 1. 

[0023] Computer system network 1 00 also has mon- 
itored computers 108 connected through network con- 
nections 104 to remote support node 102. Computer 
system network 100 may have more or less than the 
number of monitored computers 108 shown in FIG. 1. 
Browser computers 110 access remote support node 
1 02 through network connections 104 in order to view 
configuration data stored on remote support node 102. 
There may be more or less than the number of browser 
computers 1 1 0 on computer system network 1 00 shown 
in FIG. 1. Monitored and browser computer 112 is mon- 
itored by remote support node 102 through network con- 
nections 1 04. Monitored and browser computer 1 1 2 can 
also access remote support node 102 through network 
connections 104 in order to view configuration data 
stored on remote support node 1 02. There may be more 
or less than the number of monitored and browser com- 
puters 112 on computer system network 100 shown in 
FIG. 1. 

[0024] FIG. 2 shows a block diagram of remote sup- 
port node 102 (FIG. 1) of the tracking system of the 
present invention. Referring now to FIG. 2, remote sup- 
port node 102 contains a processing eloment 202. 
Processing element 202 communicates to other ele- 
ments of remote support node 102 over a system bus 
204. A keyboard 206 allows a user to input information 
into remote support node 102 and a graphics display 
210 allows remote support node 102 to output informa- 
tion to the user. A mouse 208 is also used to input infor- 
mation. 

[0025] Storage device 212 is used to store data and 
programs within remote support node 102. Within stor- 
age device 212 is data storehouse 218, which has two 
components: data base 21 4 and revision control system 
216. Communications interface 220, also connected to 
system bus 204, receives information from network con- 
nection 104. A memory 222, also attached to system 
bus 204, contains an operating system 224, web server 
software 226, pebble software 226, hat daemon soft- 
ware 230, data storehouse access software 232. and 
schedule software 234 that are called up from storage 
device 212 

[0026] A browser computer 110 (FIG. 1) requests a 
page (html file) of the tracking system of the present in- 
vention from remote support node 102. The request is 
handled by web server software 226, which invokes 
pebble software 228. Pebble software 228 is made up 
of Common Gateway Interface (CGI) scripts. The CGI 
script passes a token to hat daemon software 230 to get 
permission to run. If permission to run is given, then the 
CGI script accesses data storohouso 218 through data 
storehouse access software 232, which may be the ac- 
cess software for data base 21 4, or the access software 
for revision control system 216, or both. The data ac- 
cessed from data storehouse 21 8 is passed back to web 
server software 226. which passes it on to browser com- 



puter 110 for display in the browser frames. Schedule 
software 234 is explained in FIG. 6. 
[0027] FIG. 3 shows a block diagram of the hierarchy 
for storing data of the tracking system of the present in- 

s vention. The configuration data that is collected and 
stored in data storehouse 218 (FIG. 2) is structured by 
a view. This view imposes a hierarchical organization 
on the configuration data collected from the monitored 
devices of the networked systems. Although the view 

10 corresponds closely to how the data is structured in the 
user interface, it should not be thought of as the display. 
[0028] Referring now to FIG. 3, at the top of the hier- 
archy is root node 300, which is normally an entity name 
or a division name of an entity utilizing the tracking sys- 
tern. Examples might be "Acme Company* or "Produc- 
tion Division of Acme Company". Beneath root node 
300, group nodes 302 are organized to track computers 
and interconnect devices in groups. Typical examples 
might be "accounting group", 'manufacturing group", 

20 and "research and development group". Computer de- 
vice nodes 304 list all the computers contained under 
group nodes 302. Interconnect device nodes 306 list all 
the interconnect devices contained under group nodes 
302. Computer device nodes 304 may be further broken 

25 down into subsystem nodes 308. A subsystem nodo 
may represent a group of software within the computer, 
such as "operating system", 'accounting system", etc. 
[0029] At the bottom of the hierarchy are item nodes 
310, which are leaf level nodes representing the indMd- 

30 ually collected configuration data. Item nodes 310 are 
children of subsystem nodes 308 and interconnect de- 
vice nodes 306. Item nodes 310 may also be direct chil- 
dren of computer device nodes 304 in the absence of a 
subsystem node 308. Additional group nodes, device 

3S nodes, subsystem nodes, and item nodes not shown in 
FIG. 3 are depicted with the ". . ."notation. 
[0030] FIG . 4 shows a representation of a screen cap- 
ture of a browser computer 110 or a monitored and 
browser computer 112 accessing the stored data in the 

40 tracking system of the present invention. Referring now 
to FIG. 4, screen display 400 of browser computer 110 
or monitored and browser computer 112 (FIG. 1) has 
loaded up web browser software and has requested the 
URL (Universal Resource Locator) of the tracking sys- 

45 tern of the present invention . Remote support node 1 02 
(FIG. 1) has returned the html page requested for dis- 
play on screen display 400. Screen display 400 is divid- 
ed into two frames: tracking tree frame 402 and data 
display frame 404. Tabs 406 may be selected in tracking 

so tree frame 402 to access the different functionality of the 
tracking system. Selecting an administration tab gives 
the user access to the administrative functions of the 
present invention to sot up the tracking system. Users 
and user accounts may be added or deleted; computers 

ss and interconnect devices may be added or deleted; 
groups may be added or deleted; the collection sched- 
ule, may be set or changed; and individual items may be 
enabled or disabled from collection. Selecting a tog tab 
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allows the user to access the logging functions of the 
present invention to view log entries of collection activ- 
ities, errors, and alarms. 

[0031] Selecting a tracking tab. as shown in FIG. 4. 
gives the user access to the present inventions tracking 
functions. Selecting the tracking tab gives the user ac- 
cess to tracking tree 412 and available actions 408. By 
selecting buttons 410 within available actions 408, the 
user can alter how the stored data is displayed. For ex- 
ample, by selecting different buttons 410, the user can 
change the collection cycles selected for which tracking 
tree 412 displays configuration information; show con- 
figuration status for a particular collection cycle; show 
only the changes in configuration status between two 
particular collection cycles; update the display to reflect 
current configuration information; or access help tiles. 
[0032] Buttons 410 allow the user to select the begin- 
ning and ending collection cycles for displaying changes 
in configuration information. These two collection cycles 
selected define the range over which observed config- 
uration changes are reported. An observed change is a 
difference between the two snapshots of the configura- 
tion item as captured on the two collection cycles select- 
ed. The tracking system takes the difference between 
tho two snapshots, if any. calls the difference out for the 
user, and the difference itself is viewable through the 
web browser user interface. This difference analysis has 
intelligence in that inconsequential or expected chang- 
es, such as dates in command outputs, will be ignored 
and not flagged as differences. Differences in configu- 
ration items that are normally always changing are .ig- 
nored. 

[0033] Tracking tree 412 is an expandable index of 
configuration items being tracked for each monitored 
device and is constructed from the data in data base 
21 4 . This is done so that when a user logs in to the track- 
ing system and it becomes time to populate tracking tree 
412, it will happen very quickly. When a user views track- 
ing tree 41 2 and selects a data item that has changed, 
revision control system 216 supplies the data regarding 
the changes that were made in that data item and dis- 
plays those changes in data display frame 404. Tracking 
tree 412 utilizes the data hierarchy of FIG. 3 to display 
configuration information. To view information about 
groups, devices, and individual configuration items, also 
referred to as data items, the user may click on the [+] 
symbols to expand the tree and then select the name of 
the item of interest. 

[0034] As a way of indicating to the user that a change 
has occurred in a configuration item, change indicators 
420 are placed on or next to each icon in the tree in the 
chain starting with the group node level down to where 
tho change has occurred at the itom node level. Change 
indicators 420 may be a mark of any kind or of any color. 
In the preferred embodiment of the invention, a blue 
change indicator 420 represents a change, a yellow 
change indicator 420 represents a collection failure, and 
a brown change indicator 420 represents that the con- 



figuration item was disabled from collection. If a change 
has occurred in a configuration item from comparing the 
two collection cycles selected, and only, the group nodes 
are displayed when tracking tree frame 402 isdisplayed, 

s a change indicator 420 will be on or next to its group 
node icon. Clicking on the [+j symbol for the group node 
icon will expand the tree to list all the devices under that 
group node. The device in which change has occurred 
will have a change indicator 420 on or next to its device 

io icon. Clicking on the [+] symbol for the device icon will 
expand the tree to list all the subsystems, if any, under 
that device node. The subsystem, if any, in which 
change has occurred will have a change indicator 420 
on or next to its subsystem icon. Clicking on the [+) sym- 

is bol for the subsystem icon will expand the tree to list all 
the data items under that subsystem node. The data 
item in which change has occurred will have a change 
indicator 420 on or next to its data item icon. 
[0035] Selecting a device name in tracking tree 412 

20 displays the name of the data collection template as- 
signed to the device. Selecting individual configuration 
item names displays information about the item. Right 
clicking on any name, icon, or symbol in tracking tree 
41 2 accesses a pop-up menu which provides access to 

25 appropriate actions. Selecting a Properties option from 
the pop-up menu displays information about the item se- 
lected. Time frame 414 displays the dates of the two col- 
lection cycles selected for displayed changes. Changes 
within time frame 416 displays the changes found in da- 

30 ta items between the two collection cycles shown in time 
frame 414. Collection history 418 displays the date and 
time that the data item in question changed. 
[0036] FIG. 5 shows a flow diagram of displaying 
stored configuration information located in a remote 

35 support node on a browser computer having web brows- 
er software. Referring now to FIG. 5, in block 500 web 
browser software is loaded on browser computer 110 
(FIG. 1). In block 502, a user requests the URL of the 
tracking system of the present invention. The web 

40 browser softwa re establishes a connection through net- 
work connections 104 (FIG. 1) to remote support node 
102 (FIG. 1). In block 506. remote support node 102 
finds and returns to browser computer 110 through net- 
work connections 1 04 the html page requested in block 

45 502. 

[0037] In block 508, the html page received from block 
506 is displayed in screen display 400 (FIG. 4) on brows- 
er computer 110. The screen display is divided inlo 
tracking tree frame 402 (FIG. 4) and data display frame 

so 404 (FIG. 4). Tracking tree frame 402 contains applets, 
which are programs written in a programming language 
supported by the Web browser. Some applets associat- 
ed with tho html page run automatically when tho html 
page is received and control what is displayed within 

55 tracking tree frame 402. 

[0038] The user may choose to receive more data in 
block 510 by clicking on any of several hyperlinks that 
may be displayed in screen display 400. Additionally, 
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certain buttons, tabs, and data item names, which act 
like hyperlinks but are really applets, may be clicked on 
in tracking tree frame 402 to receive more data. Tabs 
406, available actions buttons 410. and selecting data 
item names in tracking tree 412 (FIG. 4) are examples 
of such applets. After clicking on one of these hyperlinks 
or applet controlled items, in block 512 browser compu- 
ter 1 1 0 requests the URL associated with the hyperlink, 
or initiates the applet controlled item. The applet con- 
trolled items are typically requests for Common Gate- 
way Interlace (CGI) scripts. The request for the URL or 
the CGI script is sent through network connections 104 
and received by remote support node 102 in block 514, 
where the request for the html page is received, or the 
requested CGI script is loaded. In block 51 6 remote sup- 
port node 102 finds the html page, or the CGI script com- 
municates with hat daemon software 230 (FIG. 2) to get 
permission to run, if required. If permission is granted 
or not required, the CGI script runs, fetching data from 
data storehouse 218 (FIG. 2). !n block 51 8 the html page 
is returned, or the data fetched from data storehouse 
218 is formatted into html format, and then returned 
through network connections 104 to browser computer 
1 10 for display on screen display 400. 
[0039] In block 520 the html page from either the re- 
quested URL or CGI script is normally displayed in data 
display frame 404, displaying the data requested by the 
user. In some cases, the CGI script that was run may 
not return any data for display in data display frame 404. 
Instead, a message of some kind may be posted to 
tracking tree frame 402. 

[0040] If more hyperlinks or applet controlled items 
are to be requested by the user, then in block 522 control 
returns to block 51 0 where the user may click on a next 
hyperlink or applet controlled item. If the answer in block 
522 is no, then the program ends, leaving the current 
html page displayed. The user may then select other 
URL addresses unrelated to the tracking system, or 
close the web browser software and load other pro- 
grams. 

[0041] FIG. 6 shows a flow diagram of a remote sup- 
port node collecting configuration data from computers 
and interconnect devices. Referring now to FIG. 6, in 
block 600 schedule software 234 (FIG. 2) activates at a 
predetermined time. Usually, the user will set the acti- 
vation time to occur once a day when there is low activity 
anticipated on the network, such as late at night or early 
in the morning. However, the user may initiate a collec- 
tion at any time that a scheduled collection is not already 
in progress. Collections, both scheduled and user initi- 
ated, may also be limited in scope to specific groups or 
devices as opposed to the entire enterprise. 
[0042] In block 602, schedule software- 234 passes a 
collection root identifier to a portion of pebble software 
228 (FIG. 2) and invokes that portion of pebble software 
228. That portion of pebble software 228 that receives 
the collection root identifier and is invoked by schedule 
software 234 is referred to as collector. The collection 



root identifier determines the scope of the collection to 
be performed. 

[0043] In block 604 collector then accesses data 
storehouse 218 (FIG. 2) and requests the list of items 

5 to be collected that fall within the scope of the passed 
in collection root identifier. The list is comprised of Glo- 
bally Unique Identifiers (GUIDs. or simply "identifiers*. 
Each identifier in the list is associated with a un ique con- 
figuration item to be collected from the various moni- 

10 tored devices that are included within the scope of the 
collection root identifier. Each configuration item is a unit 
of data that is collected and monitored by the tracking 
system, which provides a mapping between the name 
of a configuration item and the identifier. This data could 

'5 be a text file or the output of a command which displays 
configuration information in ASCII format. Along with the 
configuration data itself, collector will also collect any 
attributes of the data specified in the data collection tem- 
plate that. are useful to the user. Not all configuration 

20 data has useful attributes, so not all configuration data 
items will have attributes associated with them. The at- 
tributes that are collected will be displayed to the user. 
[0044] A unit of configuration data as it appears when 
collected from a monitored device is called a snapshot. 

2S |f a snapshot has changed from tho previously collected 
version of that snapshot, the differences will be stored 
in data storehouse 218 on remote support node 102. 
The set of all snapshots of a configuration item which 
have been collected and stored in data storehouse 218 

30 is called a configuration storabie. 

[0045] After collector in block 604 has received the list 
of identifiers, then collector in block 606 accesses data 
storehouse 218 and gathers collection method informa- 
tion from data storehouse 21 8 on each of the identifiers 

35 in the list, such as what devices should specific data 
items be collected from, what commands are to be used 
for collecting specific data items, and the signature of 
the last collection of a specific data item. The signature 
may be, for example, a checksum of the previous output, 

40 or a last known modified date. Prior to the first collection, 
the signature for a data item has no value. 
[0046] In block 608, collector then groups the infor- 
mation gathered in block 606 by device. Block 610 then 
determines if the first device in the list is a monitored 

45 computer or interconnect device. If the first device is a 
monitored interconnect device, then control passes to 
block 61 2, which calls FIG. 7 to perform the data collec- 
tion process on the monitored interconnect device. II the 
first device in block 610 is a monitored computer, then 

so control passes to block 614, which calls FIG. 8 to per- 
form the data collection process on the monitored com- 
puter. 

[0047] Upon returning from either FIG. 7 or FIG. 8. 
block 616 determines if the collection process is to be 
ss performed on any more devices. If the answer is yes, 
control passes to block 610, which determines if the 
next device in the list is a monitored computer or inter- 
connect device. If the answer in block 616 is no. then 
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control passes to block 618, which updates the collec- 
tion tables in remote support node 102, and then the 
process ends. The collection tables store information re- 
garding the collection, such as the time and date of the 
collection, the scope of the collection, whether there 
were any changes in the collection as compared to the 
previous collection, and if there were any failures. 
[0048] FIGS. 7 and 7A show a flow diagram of con- 
figuration data collection from a monitored interconnect 
device. Referring now to FIGS. 7 and 7A, in block 700 
collector invokes a collection script within remote sup- 
port node 1 02 associated with the first type of monitored 
interconnect device 106 (FIG. 1). In block 702 the col- 
lection script invokes the first collection command. 
[0049] Block 704 determines if the command to col- 
lect a configuration item was run successfully. There 
may be a time limit imposed on running the command, 
or a set number of tries allowed, or both. If the collection 
command was not run successfully, then in block 706 a 
lime stamp is sel and an error message is generated, 
and both are captured. Block 708 returns the time stamp 
and the error message to remote support node 102. 
Block 710 stores the time stamp and error message in 
a log file in data base 21 4 within data storehouse 218 
(FIG. 2). The data is stored in ASCII format. Control then 
passes to block 726. 

[0050] If the collection command was run successfully 
in block 704. then in block 712 a new signature is cre- 
ated and a time stamp is set. Block 714 then captures 
the output of the command, any attributes associated 
with the configuration data to be collected, the new sig- 
nature, and the time stamp. Block 716 returns this cap- 
tured data to remote support node 102 and stores it in 
memory 222. Block 71 8 compares the new signature for 
the configuration item from block 712 to the previously 
collected signature for that same configuration item. 
Block 720 determines if the two signatures compared in 
block 718 are the same or different. If there is no differ- 
ence between the two signatures, then in block 722 the 
output of the command, any attributes, the new signa- 
ture, and the time stamp are discarded. Control then 
passes to block 728. 

[0051] If in block 720 the two signatures are deter- 
mined to be different, then in block 724 the differences 
in the output of the command, any attributes, and the 
time stamp are stored in revision control system 216 
within data storehouse 218 (FIG. 2). Block 726 then 
stores the new signature, the time stamp, and a change 
event indicator in data base 214 within data storehouse 
218. All of the data is stored in ASCII format. Control 
then passes to block 728. 

[0052] Block 728 determines if there are any more col- 
lection commands to bo run in tho group for this moni- 
tored interconnect device 106. If the answer Is yes, con- 
trol passes to block 702 where the next command is in- 
voked. If the answer in block 728 is no., then control re- 
turns to FIG. 6. 

[0053] FIGS. 8 and 8A show a flow diagram of con- 



figuration data collection from a monitored computer. 
Referring now to FIGS. 8 and 8A, in block 800, collector 
launches a remote execution of the collection process 
through a DCE (Data Communication Exchange) RPC 

£ (Remote Procedure Call) procedure by passing the 
group of information for the first monitored computer to 
the first monitored computer. In block 802 collector in- 
vokes the client collection software that has been pre- 
viously installed on monitored computer 108. In block 

io 804, the client collection software invokes the first 
passed in collection command. 
[0054] Block 806 determines if the command to col- 
lect a configuration item was run successfully. There 
may be a time limit imposed on running Ihe command, 

'5 or a set number of tries allowed, or both. If the collection 
command was not run successfully, then in block 808 
the client collection software sets a time stamp and gen- 
erates an error message, and both are stored in a mem- 
ory in monitored computer 108 (FIG. 1). The data is 

20 stored in ASCII formal. Control then passes to block 
818. 

[0055] If the collection command was run successfully 
in block 806, then in block 810 the client collection soft- 
ware creates a new signature for the configuration item 

25 and compares this now signature to the previously col- 
lected signature that was passed in block 800. Block 81 2 
determines if the two signatures compared in block 810 
are the same or different. If there is no difference be- 
tween the two signatures; then in block 814 the output 

30 of the command, any attributes, the new signature, and 
the time stamp are discarded. Control then passes to 
block 818. 

[0056] If in block 812 the two signatures are deter- 
mined to be different, then in block 816 the differences 

3S in the output of the command, any attributes, and the 
time stamp are stored in memory within the monitored 
computer. Control then passes to block 81 8. 
[0057] Block 81 8 determines if there are any more col- 
lection commands to be run in the group for this moni- 

40 tored computer 1 08. If the answer is yes, control passes 
to block 804 where the client collection software invokes 
the next passed in command. If the answer in block 818 
is no, then control passes to block 820. 
[0058] In block 820 the stored data from blocks 808 

45 and 816 is returned to remote support node 102 (FIG. 
1 ). In block 822 the differences in the output of the com- 
mand, any attributes, and the time stamp for each col- 
lection command having a difference are stored in revi- 
sion control system 216 within data storehouse 218 

50 (FIG. 2). Block 824 then stores the new signature, the 
time stamp, and a change event indicator for each col- 
lection command having a difference in data base 214 
within data storehouse 218. Block 826 storos tho timo 
stamp and error message for each collection command 

55 that failed in log file in data base 21 4 within data store- 
house 218 (FIG. 2). All of the data is stored in ASCII 
format. Control then returns to FIG. 6. 
[0059] One skilled in the art will recognize thai if a 
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command failed, the time stamp and error message 
could immediately be sent to remote support node 102 
for storage. Likewise, if the command was successful 
and there was a difference between the new signature 
compared to the previous signature, the data to be 
stored could immediately be sent to remote support 
node 102 for storage. 

[0060] Having described a presently preferred em- 
bodiment of the present invention, it will be understood 
by those skilled in the art that many changes in construc- 
tion and circuitry and widely differing embodiments and 
applications of the invention will suggest themselves 
without departing from the scope of the present inven- 
tion, as defined in the claims. The disclosures and the 
description herein are intended to be illustrative and are 
not in any sense limiting of the invention, defined in 
scope by the following claims. 



Claims 

1. A computerized method for tracking configuration 
changes within a computer system comprising the 
steps of: 

(a) collecting (602, 604, 606, 60S, 610, 612, 
614) a first snapshot of a data item having a 
unique identifier at a first predetermined time, 
from a first monitored device (106, 108) on a 
computer system network (100). and setting a 
first time stamp indicating when said first snap- 
shot was collected: 

(b) storing (724, 726. 822, 824) said first snap- 
shot of said data item and said first time stamp 
in a data storehouse (218) within a remote sup- 
port node (102) connected to said first moni- 
tored device (106, 108) through a first network 
connection (104) within said computer system 
network (100); 

(c) collecting (602, 604, 606, 608, 610, 612, 
614) a second snapshot of said data item hav- 
ing said unique identifier at a second predeter- 
mined time, from said first monitored device 
(106, 108) on said computer system network 
(100), and setting a second time stamp indicat- 
ing when said second snapshot was collected; 

(d) comparing (718, 810) said stored first snap- 
shot of said data item to said collected second 
snapshot of said data item; 

(e) when step (d) determines that said collected 
second snapshot of said data item has at least 
one difference (720. 812) from said stored first 
snapshot of said data item, performing step (1) 
and not step (g), and when step (d) determines 
that there is no difference (720. 812), perform- 
ing step (g) and not step (f); 

(f) storing (724. 726. 822. 824) all differences 
identified in step (d) and said second time 



stamp in said data storehouse (21 8) within said 
remote support node (102) as a most recently 
stored snapshot of said data item; 

(g) discarding (722. 814) said second snapshot 
5 and said second time stamp, wherein said 

stored first snapshot is a most recently stored 
snapshot of said data item; and 

(h) displaying (520) said all differences stored 
in step (f) between said second snapshot and 

10 said first snapshot, or displaying an indication 

that said no difference was determined be- 
tween said second snapshot and said first 
snapshot, on a graphics display (210) in said 
remote support node (102). 

is (i) collecting (602, 604, 606, 608, 610, 612, 

614) an additional snapshot of said data item 
having said unique identifier at an additional 
predetermined time, from said first monitored 
device ( 1 06, 1 08) on said computer system net- 

20 work (100). and setting an additional lime 

stamp indicating when said additional snapshot 
was collected; 

(j) comparing (718, 810) said additional snap- 
shot of said data item to said most recently 

25 stored snapshot of said data item; 

(k) repeating steps (e), (f), (g), and (h) for said 
additional snapshot and said most recently 
stored snapshot of said data item; and 
(I) repeating steps (i), (j), and (k) for a plurality 

30 of additional snapshots of said data item having 

said unique identifier, at a plurality of additional 
predetermined times, from said first monitored 
device (1 06, 108) on said computer system net- 
work (100). 

35 

2. A computerized method for tracking configuration 
changes within a computer system according to 
claim 1 further comprising the step of: 

40 (m) repeating steps (a) through (I) for a plurality 

of data items of said first monitored device 
(106, 108) on said computer system network 
(100), wherein each of said plurality of data 
items has a different unique identifier. 

*5 (n) repeating steps (a) through (m) for each of 

a plurality of additional monitored devices (106, 
108) on said computer system network (100), 

3. A computerized method for tracking configuration 
50 changes within a computer system according to 

claim 1 wherein step (a) further comprises step (aO) 
performed before step (a), step (c) further compris- 
es step (cO) performed beforo step (c), stop (i) fur- 
ther comprises step (iO) performed before step (i), 
55 and step (I) further comprises step (10) performed 
before step (I): 

(a0) setting (600) said first predetermined time 
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for collecting said first snapshot of said data 
item within schedule software (234) located 
within said remote support node (102); 
(cO) setting (600) said second predetermined 
time for collecting said second snapshot of said s 
data item within said schedule software (234) 
located within said remote support node (102); 
(iO) setting (600) said additional predetermined 
time for collecting said additional snapshot of 
said data item within said schedule software 10 
(234) located within said remote support node 
(102); and 

(10) setting (600) said plurality of additional pre- 
determined times for collecting said plurality of 
additional snapshots of said data item within is 
said schedule software (234) located within 
said remote support node (102). 

4. A computerized method for tracking configuration 
changes within a computer system according lo 20 
claim 3 wherein step (aO) further comprises the 
steps of: 

(aOa) invoking (600) said schedule software 
(234) at said first predetermined time; 2s 
(aOb) passing (602) a collection root identifier 
from said schedule software (234) to pebble 
software (228) located within said remote sup- 
port node (102); wherein said collection root 
identifier defines a list ol data items; 30 
(aOc) invoking (602), with said schedule soft- 
ware (234), a collector portion of said pebble 
software (228); 

(aOd) accessing (604), with said collector por- 
tion of said pebble software (228), a data store- 35 
house (218) within said remote support node 
(102), wherein said collection root identifier is 
used to get said list of data items; 
(aOe) accessing (606), with said collector por- 
tion of said pebble software (228), said data 40 
storehouse (218) within said remote support 
node (102). wherein collection method informa- 
tion is gathered for collecting said snapshots of 
each of said data items in said list of data items 
from said first monitored device (106, 108),and *s 
from a plurality of additional monitored devices 
(106, 108), said collection method information 
comprising commands for collecting each of 
said data items in said list, attributes of each of 
said data items when said attributes are asso- so 
ciated with each of said data items in said list, 
a most recently stored signature of each of said 
data items in said list, and from which of said 
first monitored device (106. 108) and said plu- 
rality of additional monitored devices (1 06, 1 08) 55 
each of said data items in said list is to be col- 
lected; and 

(aOf ) grouping (608) said collection method in- 
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formation gathered in step (aOe) by said first 
monitored device (106. 108) and by each of 
said plurality of additional monitored devices 
(106. 108). 

5. A computerized method for tracking configuration 
changes within a computer system according to 
claim 4 wherein said first monitored device (106, 
108) on said computer system network (100) is a 
first monitored interconnect device (106). 

6. A computerized method for tracking configuration 
changes within a computer system according to 
claim 5 wherein step (a) further comprises the steps 
of (a1 ) through (a1 2), and step (c) further comprises 
the steps of (cl) through (C15): 

(ai ) invoking (700), through said collector por- 
tion of said pebble software (228), a collection 
script for collecting said first snapshot of said 
data item from said first monitored interconnect 
device (106); 

(a2) invoking (702), through said collection 
script, a first command from said grouped col- 
lection mothod information gathered in step 
(aOe) and grouped in step (aOf) for said first 
monitored interconnect device (106), to collect 
said first snapshot of said data item from said 
first monitored interconnect device (106); 
(a3) determining (704) if said first command to 
collect said first snapshot of said data item was 
successfully executed; 

(a4) when step (a3) determines that said first 
command was successfully executed, perform- 
ing steps (a5) through (a9) and not steps (alO) 
through (at 2), and when step (a3) determines 
that said first command was not successfully 
executed, performing steps (a1 0) through (a 1 2) 
and not steps (a5) through (a9); 
(a5) creating (71 2) a first signature for said data 
item; 

(a6) capturing (714) a first output from said ex- 
ecuted first command, any first attributes, said 
tirst signature, and said first time stamp; 
(a7) returning (716) said captured first output, 
said captured any first attributes, said captured 
first signature, and said captured first time 
stamp to said remote support node (102) for 
storing in a memory (222) within said remote 
support node (102); 

(a8) transferring (724), from said memory (222) 
within said remote support node (102), said 
stored first output, said stored any first at- 
tributes, and said stored first time stamp for 
storage in a revision control system (216) in 
said data storehouse (218) within said remote 
support node (102), wherein said stored first 
output, said stored any first attributes, and said 
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stored first time stamp constitute said first 
snapshot; 

(a9) transferring (728), from said memory (222) 
within said remote support node (102), said 
stored first signature, said stored first time s 
stamp, and a first change event indicator for 
storage in a data base (214) in said data store- 
house (218) within said remote support node 
(102); 

(ai (^generating (706) a first error message, 10 
and capturing said first error message and said 
first time stamp; 

(ail)retuming (708) said captured first error 
message and said captured first lime stamp to 
said remote support node (102); is 
(al2)storing (7 10) said captured first error mes- 
sage and said captured first time stamp in a log 
file in a data base (21 4) in said data storehouse 
(218) within said remote support node (102);, 
(d) invoking (700), through said collector por- 20 
tton of said pebble software (228), said collec- 
tion script for collecting said second snapshot 
of said data item from said first monitored inter- 
connect device (106); 

(c2) invoking (702), through said collodion 2S 
script, a first command Irom said grouped col- 
lection method information gathered in step 
(aOe) and grouped in step (aOf) for said first 
monitored interconnect device (106), to collect 
said second snapshot of said data item from 30 
said first monitored interconnect device (106); 
(c3) determining (704) if said first command to 
collect said second snapshot of said data item 
was successfully executed; 
(c4) when step (c3) determines that said first 35 
command was successfully executed, perform- 
ing steps (c5) through (d 2) and not steps (d 3) 
through (c15), and when step (c3) determines 
that said first command was not successfully 
executed, performing steps (c1 3) through (c1 5) 40 
and not steps (c5) through (c12); 
(c5) creating (712) a second signature for said 
data item; 

(c6) capturing (71 4) a second output from said 
executed first command, any second attributes, 
said second signature, and said second time 
stamp; 

(c7) reluming (716) said captured second out- 
put, said captured any second attributes, said 
captured second signature, and said captured so 
second time stamp to said remote support node 
(102) for storing in a memory (222) within said 
remote support nodo (102); 
(c8) comparing (718), within said remote sup- 
port node (102). said second signature o1 said ss 
data item with said most recently stored signa- 
ture of said data item from step (aOe); 
(c9) when step (c8) determines that said sec- 



ond signature is different (720) from said most 
recently stored signature of said data item, per- 
forming steps (c10) and (c11) and not step 
(d 2). and when step (cl 0) determines that said 
second signature is not different (720), per- 
forming step (c12) and not steps (c10) and 
(C11); 

(dO)transferring (724), from said memory 
(222) within said remote support node (102), 
said stored second output, said stored any sec- 
ond attributes, and said stored first time stamp 
for storage in a revision control system (216) in 
said data storehouse (218) within said remote 
support node (102), wherein said stored sec- 
ond output, said stored any second attributes, 
and said stored second time stamp constitute 
said second snapshot; 

(c11)transferring (726), from said memory 
(222) within said remote support node (102), 
said stored second signature, said stored sec- 
ond time stamp, and a second change event 
indicator for storage in a data base (21 4) in said 
data storehouse (218) within said remote sup- 
port node (102); 

(c1 2)discarding (722) said captured second 
output, said captured any second attributes, 
said captured second signature, and said cap- 
tured second time stamp; 
(cl 3)gene rating (706) a second error message, 
and capturing said second error message and 
said second time stamp; 
(c14)retuming (708) said captured second er- 
ror message and said captured second time 
stamp to said remote support node (102); and 
(c15)storing (710) said captured second error 
message and said captured second time stamp 
in a tog file in a data base (214) in said data 
storehouse (218) within said remote support 
node (102). 

A computerized method for tracking configuration 
changes within a computer system according to 
claim 4 wherein said first monitored device (106, 
108) on said computer system network (100) is a 
first monitored computer (108). 

A computerized method for tracking configuration 
changes within a computer system according to 
claim 7 wherein step (a) further comprises the steps 
of (al) through (a1 3). and step (c) further comprises 
the steps of (cl) through (c16); 

(a1) launching (800), through said collector 
portion of said pebble software (228), remote 
execution of collecting said grouped collection 
method information for said first monitored 
computer (108) by passing said grouped col- 
lection method information for said first moni- 
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tored computer (108) to said first monitored 
computer (108); 

(a2) invoking (802). through said collector por- 
tion of said pebble software (228) . client col- 
lection software installed on said first monitored s 
computer (108) to collect said first snapshot of 
said data item; 

(a3) invoking (804), through said client collec- 
tion software, a first command from said 
grouped collection method information passed 10 
to said first monitored computer (108) in step 
(al ) to collect said data item from said first mon- 
itored computer (108); 

(a4) determining (806) i1 said first command to 
collect said data item was successfully execut- '5 
ed; 

(a5) when step (a4) determines that said first 
command Was successfully executed, perform- 
ing steps (a6) through (a10) and not steps (al 1 ) 
through (a1 3), and when slep (a4) determines 20 
that said first command was not successfully 
executed, performing steps (a11) through 
(a13), and not steps (a6) through (a 10); 
(a6) creating (81 0) a first signature for said data 
itom; 25 
(a7) storing (816) a first output from said exe- 
cuted first command, any first attributes, said 
first signature, and said first time stamp in a first 
monitored computer memory; 
(a8) returning (820) saidstored first output, said 30 
stored any first attributes, said stored first sig- 
nature, and said stored first time stamp, from 
said first monitored computer memory, to said 
remote support node ( 1 02) for storing in a mem- 
ory (222) within said remote support node 35 
(102); 

(a9) transferring (822), from said memory (222) 
in said remote support node (102), said stored 
first output, said stored any first attributes, and 
said stored first time stamp for storage in a re- *o 
vision control system (216) in said data store- 
house (218) within said remote support node 
(102), wherein said stored first output, said 
stored any tirst attributes, and said stored first 
time stamp constitute said first snapshot; 
(alO)transf erring (824). from said memory 
(222) in said remote support node (102), said 
stored first signature, said stored first time 
stamp, and a first change event indicator for 
storage in a data base (214) in said data store- so 
house (218) within said remote support node 
(102); 

(all)goncrating (808) a first error message, 
and storing said first error message and said 
first time stamp in a first monitored computer ss 
memory; 

(a 1 2) returning (820) said stored first error mes- 
sage and said stored first lime stamp from said 



first monitored computer memory to said re- 
mole support node (102); 
(a13)storing (826) said stored first error mes- 
sage and said stored first time stamp in a log 
file in a data base (21 4) in said data storehouse 
(218) within said remote support node (102); 
(d ) launching (800), through said collector por- 
tion of said pebble software (228), remote ex- 
ecution of collecting said grouped collection 
method information for said first monitored 
computer (108) by passing said grouped col- 
lection method information for said first moni- 
tored computer (108) to said first monitored 
computer (108); 

(c2) invoking (802), through said collector por- 
tion of said pebble software (228), client collec- 
tion software installed on said first monitored 
computer (1 OS) to collect said second snapshot 
of said data item; 

(c3) invoking (804), through said client collec- 
tion software, a first command from said 
grouped collection method information passed 
to said first monitored computer (108) in step 
(d ) to collect said data item from said first mon- 
itored computer (1 08); 

(c4) determining (806) if said first command to 
collect said data item was successfully execut- 
ed: 

(c5) when step (c4) determines that said first 
command was successfully executed, perform- 
ing steps (c6) through (c10) and not step (c1 1 ), 
and when step (c4) determines that said first 
command was not successfully executed, per- 
forming step (C11) and not steps (c6) through 
(c10); 

(c6) creating (810) a second signature for said 
data item; 

(c7) comparing (810) said second signature of 
said data item with said most recently stored 
signature of said data item from step (aOe) ; 
(c8) when step (c7) determines that said sec- 
ond signature is different (81 2) from said most 
recently stored signature of said data item, per- 
forming step (c9) and not step (c10), and when 
step (c7) determines that said second signature 
is not different (812), performing step (clO) and 
not step (c9); 

(c9) storing (816) differences from a second 
output from said executed first command, any 
second attributes, said second signature, and 
said second time stamp in a first monitored 
computer memory; 

(dO)discarding (814) a second output from 
said executed first command, any second at- 
tributes, said second signature, and said sec- 
ond time stamp; 

(cl 1 generating (808) a second error message, 
and storing said second error message and 
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said second time stamp in a first monitored 
computer memory; 

(d2)returning (820) said stored differences 
from said second output from said executed 
first command, said stored any second at- s 
tributes, said stored second signature, and said 
stored second time stamp, from said first mon- 
itored computer memory, to said remote sup- 
port node (102) for storing in a memory (222) 
within said remote support node (102); io 
(c13)returning (820) said stored second error 
message and said stored second time stamp, 
from said first monitored computer memory, to 
said remote support node (102) for storing in 
said memory (222) within said remote support is 
node (102); 

(cH)transf erring (822), from said memory 
(222) in said remote support node (102), said 
stored differences from said second output, 
said stored any second attributes, and said so 
stored second time stamp for storage in a revi- 
sion control system (216) in said data store- 
house (218) within said remote support node 
(102), wherein said stored differences from 
said second output, said stored any second at- 25 
tributes, and said stored second time stamp 
constitute said second snapshot; 
(c15)transferring (824), from said memory 
(222) in said remote support node (102), said 
stored first signature, said stored second time 30 
stamp, and a second change event indicator for 
storage in a data base (214) in said data store- 
house (218) within said remote support node 
(102); and 

(c16)transferring (826), from said memory 35 
(222) in said remote support node (102), said 
stored second error message and said stored 
second time stamp for storage in a log file in 
said data base (214) in said data storehouse 
(218) within said remote support node (102). 40 

9. A computerized method for tracking configuration 
changes within a computer system according to 
claim 1 wherein step (h) further comprises the steps 

Of: 45 

(hi) loading (500) web browser software (226) 
on a browser computer (110), wherein said 
browser computer ( 1 1 0) is connected to said re- 
mote support node (102) through a second net- so 
work connection (104); 

(h2) requesting (502), through said web brows- 
. or software (226), a universal rosourcc locator 
for said computerized method for tracking con- 
figuration changes; ss 
(h3) establishing a connection between said 
browser computer (110) and said remote sup- 
port node (102) through said second network 
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connection (104): 

(h4) finding (506). within said remote support 
node (102). a html page associated with said 
universal resource locator requested in step 
(h2) for said computerized method for tracking 
configuration changes; 

(h5) returning (506) said html page for said 
computerized method for tracking configuration 
changes to said browser computer (110) 
through said connection; and 
(h6) displaying (508) said html page for said 
computerized method for tracking configuration 
changes on a screen display (400) on said 
browser computer (110) wherein said all differ- 
ences stored in step (f) are displayed within 
said html page on said screen display (400). 

10. A computerized method for tracking configuration 
changes within a computer system according to 
claim 9 wherein step (h6) further comprises the 
steps of: 

(h6a) displaying (508) said html page on said 
screen display (400) as a tracking tree frame 
(402) and a data display framo (404) further 
comprising the steps of 

(h6a1 )displaying in said tracking tree 
frame (402) at least one tab (406), wherein 
receiving click input on said at least one tab 
(406) accesses a function of said compu- 
terized method for tracking configuration 
changes, and 

(h6a2)displaying within each of said at 
least one tab (406) at least one available 
action button (410), wherein receiving click 
input on said at least one available action 
button (410) will execute a specific action 
within said function of said computerized 
method for tracking configuration changes, 
and 

(h6b) receiving (510) click input on a hyperlink 
in said html page; 

(h6c) requesting (512) a universal resource lo- 
cator for said hyperlink in said html page 
through said web browser software (226) and 
said connection to said remote support node 
(102); 

(h6d) finding (516), within said remote support 
node (102), a html page for said hyperlink re- 
quested in step (h6c); 

(h6o) returning (51 8) said html pago for said hy- 
perlink to said browser computer (110) through 
said connection; and 

(h6f) displaying (520) said html page for said 
hyperlink in said data display frame (404) in 
said screen display (400). 



-JNSDOCIO: <EP„ ..0952521A2 t > 



12 



EP 0 952 521 A2 



100 

.Si- 



MONITORED I^V 
COMPUTER 



108 



MONITORED 
COMPUTER 



v 108 



MONITORED 
COMPUTER 



104 



INTERCONNECT 
DEVICE 



106 



112 

XL- 



MONITORED 
AND BROWSER 
COMPUTER 





104 












102 








[ REMOTE } 




SUPPORT 




I NODE 








104 




r 



v 108 

t 



110 
J* 



BROWSER 
COMPUTER 



INTERCONNECT 
DEVICE 



MONITORED 
COMPUTER 



x 108 

t 



BROWSER 
COMPUTER 



V 110 

y 



v 106 

Y 



108 
J/ 



MONITORED 
COMPUTER 



FIG. 1 



13 



EP 0 952 521 A2 




EP 0 952 521 A2 



ROOT 

NODE 



k 300 
W 



310 




ITEM 


• • • 


k NODE 





310 



FIG. 3 



BNSDOCID: <EP. . 0952521 A2 I > 



15 



EP 0 952 521 A2 




400 

XL- 



420 



404 



TIME FRAME 



414 



CHANGES WITHIN TIME FRAME 



416 



418 



COLLECTION HISTORY 



FIG. 4 



BNSDOCIO. <EP_ . 0952521 A2. 1. > 



16 



EP 0 952 521 A2 



BROWSER COMPUTER 



500 , 



502 



( START ] 



LOAD WEB 
BROWSER ON 
BROWSER COMPUTER 



3 



REQUEST URL OF ^ 
TRACKING SYSTEM f 



508 

^ DISPLAY HTML PAGE 
AND RUN APPLETS 



510 
512 



y 



CLICK ON ITEM 
FOR MORE DATA 



REQUEST URL OF 
HYPERLINK OR 
CGI SCRIPT 



520 

w 



DISPLAY HTML 
PAGE 




N 
E 
T 
W 

o 

R 
K 



C 

o 

N 
N 
E 
C 
T 
I 

O 
N 

S 



REMOTE SUPPORT NODE 



104 
W 



506 
XL 



REMOTE SUPPORT 
NODE FINDS AND 
RETURNS HTML 

PAGE REQUESTED 



1 



) 



514 



-> 



RECEIVE REQUEST 
FOR HTML PAGE OR 
LOAD CGI SCRIPT 

516 4r 
W FIND HTML PAGE OR 
RUN CGI SCRIPT AND 

FETCH DATA FROM 
, DATA STOREHOUSE 

518 ^ M ""T""* M ' M 

RETURN HTML PAGE 
OR FORMAT DATA 

INTO HTML 
AND RETURN PAGE 



) 



FIG. 5 



BNSDOCID<EP 0952521 A2. 1 



17 



EP 0 952 521 A2 



START 



SCHEDULE SOFTWARE 

ACTIVATES AT A 
PREDETERMINED TIME 



SCHEDULE SOFTWARE 
PASSES ROOT ID TO, AND 
INVOKES, COLLECTOR 
IN PEBBLE SOFTWARE 



602 



COLLECTOR ACCESSES 
DATA STOREHOUSE TO 
GET A LIST OF ITEMS 
TO BE COLLECTED 



604 



T. 



COLLECTOR ACCESSES 
DATA STOREHOUSE 
FOR DEVICE, COM- 
y MANDS, & SIGNATURES 



COLLECTOR GROUPS 
INFORMATION BY DEVICE 



- 600 

y 

^6C 

y 
r 

x 606 

y 

608 



r 




COLLECT DATA FROM 
INTERCONNECT DEVICE 



FIG. 



VICE | 



COLLECT DATA FROM 
MONITORED COMPUTER 



FIG. 8: 




UPDATE COLLECTION 
TABLE 

T 

END 



r 



FIG. 6 



BNSDCCID: <EP 0952S21A2 I. > 



16 



EP 0 952 521 A2 



ENTER 



INVOKE SCRIPT FOR 
FIRST/NEXT INTER- 
CONNECT DEVICE 



v 700 

Y 




INVOKE FIRST/NEXT 
PASSED COMMAND 



«v 702 

y 




GENERATE AND 
CAPTURE TIME 
STAMP AND ERROR 
MESSAGE 



RETURN CAPTURED 
TIME STAMP AND 
ERROR MESSAGE 
TO REMOTE 
Sj- £UPPORTNODE 

STORE CAPTURED 
TIME STAMP AND 
ERROR MESSAGE IN 
A LOG FILE IN THE 
DATABASE 



} 

T 



CREATE NEW 
SIGNATURE AND 
SET TIME STAMP 



J 



714 



7 ^ 



CAPTURE OUTPUT 
OF COMMAND, 
ATTRIBUTES, 
NEW SIGNATURE, 
AND TIME STAMP 



RETURN CAPTURED 
DATA TO REMOTE 
SUPPORT NODE 



] 



± 




FIG. 7A 
1 



718 /COMPARE FIRST/NEXT 
H NEW SIGNATURE WITH 
CORRESPONDING 
^PREVI OUS SI GNATURE 



J 



FIG. 7A 




FIG. 7 



BNSOOCID: <EP . 0952S21A2 I > 



19 



EP 0 952 521 A2 




722 
XL 



DISCARD OUTPUT 

OF COMMAND, 
ATTRIBUTES, NEW 
SIGNATURE, AND 
TIME STAMP 



724 

STORE OUTPUT OF 
COMMAND DIFFER- 
ENCES. ATTRIBUTES. | 
AND TIME STAMP 
IN REVISION 
. CONTROL SYSTEM 



726 



V STORE SIGNATURE, . 
CHANGE EVENT, AND 
TIME STAMP IN 
DATABASE 

r 




( RETURN ~) 



FIG. 7 A 



BNSDOCID.<EP.. 0952521A2 I > 



20 



« • k 

EP 0 952 521 A2 



ENTER 



COLLECTOR LAUNCHES\ 



REMOTE EXECUTION 
AND PASSES GROUPED 

INFORMATION FOR 
> FIRST/NEXT DEVICE j 



800 



I 



k 802 

INVOKE CLIENfCOTW 
LECTION SOFTWARE I 

k 



( CLIENT COLLECTIONS 804 
SOFTWARE INVOKES " 

FIRST/NEXT 
PASSED COMMAND 




GENERATE AND 
STORE TIME STAMP 
lAND ERROR MESSAG 



NEW SIGNATURE 
CREATED, COMPARE 
WITH PASSED 
IN SIGNATURE 



) 



812 



814 




N 



DIFFERENCE" 



DISCARD OUTPUT 
OF COMMAND, AT- 
TRIBUTES, NEW. 
SIGNATURE, AND 
TIME STAMP 



816 



STORE OUTPUT OF ' 
COMMAND DIFFER- 
ENCES, ATTRIBUTES, 
NEW SIGNATURE, 
AND TIME STAMP 




FIG. 8 



BNSDOCID: <EP.. 0952521A2 \ > 



21 



EP 0 952 521 A2 



I FIG. 8 I 



RETURN STORED 
DATA TO REMOTE 
SUPPORT NODE 

T 



820 



STORE OUTPUT OF 
COMMAND DIFFER- . 
ENCES, ATTRIBUTES, 
AND TIME STAMP IN 
REVISION CONTROL 
SYSTEM 

r- 



f STORE SIGNATURES,^ 
CHANGE EVENTS, 
AND TIME STAMPS 
IN DATABASE 



STORE TIME STAMP \J/ 
AND ERROR MES- 
SAGE IN A LOG FILE 
IN THE DATABASE 

[ RETURN^) 

FIG. 8 A 



22 



IIIIIIIIIPPIUI 

(in EP 0 952 521 A3 



(12) EUROPEAN PATENT APPLICATION 

(88) Date of publication A3: ( 5 1) int C \7: G06F 1 1/30, G06F 1 1/22, 

14.11.2001 Bulletin 2001/46 H04L 12/24 

(43) Date of publication A2: 

27.1 0.1 999 Bu lletin 1 999/43 

(21) Application number: 99303004.8 



(22) Date of filing: 19.04.1999 



(84) Designated Contracting States: 


• Bryant Craig William 


AT BE CH CY DE OK ES Fl FR GB GR IE IT LI LU 


Fort Collins, CO 80526 (US) 


MC NL PT SE 


• Goin, Todd M. 


Designated Extension States: 


Loveland, CO 80538 (US) 


AL LT LV MK RO SI 


• Moos, Thomas J. 




Windsor, CO 80550 (US) 


(30) Priority: 23.04.1998 US 65263 






(74) Representative: Colgan, Stephen James et al 


(71) Applicant: Hewlett-Packard Company, 


CARPMAELS & RANSFORD 


A Delaware Corporation 


43 Bloomsbury Square 


Palo Alto, CA 94304 (US) 


London WC1A2RA (GB) 


(72) Inventors: 




• Steele, Douglas William 




Fort Collins, CO 80525 (US) 





(54) Method for tracking configuration changes in networks of computer systems through 
historical monitoring of configuration status of devices on the network 




Europaisches Patentamt 
European Patent Office 
Office europeen des brevets 



CO 

< 



(57) A tracking system that uses a revision control 
system (21 6) and configuration status gathering to his- 
torically track and store configuration changes in com- 
puters (108) and interconnect devices (106) to aid in 
managing and troubleshooting networks of computer 
systems. Configuration data is gathered from devices 
on the network on a periodic basis. The data collected 
each collection cycle is stored in a data storehouse 
(218) on a computer within the network, called the re- 
mote support node (1 02). The data storehouse (21 8) is 
comprised of a revision control system (216) and a data 
base (214). The data is accessed by computers on the 
network having web browsers. The user selects a first 
and second collection time, and any changes in config- 
uration of any monitored devices (106, 108) in the net- 
work occurring between those two collection times is 
displayed in the browser window. Configuration chang- 
es from different collection cycles may be viewed. 



100 



MONiTOREO| 
COMPUTER 



r t 



[MONITORED f 
COMPUTER 



MONITORED 
COMPUTER 



104 



INTERCONNECT 
CEVICE 



112 



r 



MOWTORED , 
AND BROWSER 
COMPUTER 1 



102 



REMOTE ^ 
SUPPORT I 



r 



110 , 



BROWSER 
COMPUTER 



INTERCONNECT 
DEVICE 



MOMirOREDV 
COMPUTER I 



104 

rf ... 



r 



108 



BROWSER W [MONirOREoV 
COMPUTEWj [COMPUTER} 



CM 

in 

CM 
LO 

o> 
o 

CL 
LU 



FIG. 1 



Printed by Jouvo. 76001 PARIS (FR) 



BNSDOClO: <£P 095252! A3. 1 > 



BP 0 952 521 A3 




European Patent 
Office 



EUROPEAN SEARCH REPORT 



A pptical I on Numb* 

EP 99 30 3004 



DOCUMENTS CONSIDERED TO BE RELEVANT 



Category 



Citation of document with indication, where appropriate. 
of rgevant passages 



Relevant 
to claim 



CLASSIFICATION OF THE 
APPLICATION (tm.CH ) 



US 5 696 701 A (BURGESS GREGORY M ET AL) 
9 December 1997 (1997-12-09) 

* column 4, line 28 - line 36 * 

* column 5, line 24 - column 6, line 10 * 

G6 2 202 062 A (PLESSEY CO PLC) 
14 September 1988 (1988-09-14) 

* the whole document * 

W0 95 20196 A (PIAT0N ALAIN NICOLAS) 
27 July 1995 (1995-07-27) 

* page 4, line 7 - page 6, line 32 * 

* page 10, line 18 - page 11, line 8 * 



G06F11/30 
G06F 11/22 
H04L 12/24 



TECHNICAL FIELDS 
SEARCHED 0nLCl6> 



G06F 
H04L 



Tne present search report has been drawn up for all claims 



Plaw 'J watch 

THE HAGUE 



(M* ot corn** or o* irw v«*ch 

19 September 2001 



Herreman, G 



CATEGORY OF CUED DOCUMENTS 



T . theory of poncpto undortytng Iho invention 
E aartwr patent oocurnerd. bm pubhshet) on, or 



y panfcutmy roiovant if oomtxneo « 

document of the saino category 
A lechnotogtari background 
O . nnn written Asdosuro 
P iirtrtfi radiate document 



wmgdat 

D : ctocumort cited ii the application 
L . document cited for other reasons 



A myrrtiw o» tne same patent lamiy. correspond*^ 



BNSDOCID: <EP 0952S21A3 I > 



2 



EP 0 952 521 A3 



ANNEX TO THE EUROPEAN SEARCH REPORT 
ON EUROPEAN PATENT APPLICATION NO. 



EP 99 30 3004 



This annex lists the paienl family membersrefeting to the patent documents cited in the above-mentioned European search report. 
The member s are as contained « the European Patent Ofltee EDP fHe on 

The European Patent Office is In no way liable tar these particulars which are merely given tor the purpose of information. 

19-09-2001 



Patent document 
cited m search report 



Publication 



Patent tamiry 
member(s) 



Publpcatwn 
date 



US 5696701 
GB 2202062 
WO 9520196 



09-12-1997 NONE 



14-09-1988 NONE 



27-07-1995 



FR 
U0 

US 



2715486 Al 
9520196 Al 
5806073 A 



28-07-1995 
27-07-1995 
08-09-1998 



i For more details aixxit this annex : see Official Journal of the European Patent Office. No. 12/82 



BNSOOCID: <EP 0&52521A3 I > 



